Privacy Policy

This Privacy Policy applies to the vCard Creator service operated at vbizcard.my (“we”, “us”, “our”, or “the Service”). We are the data controller responsible for the personal data you provide when you register and use this service.

If you have any questions or concerns about this policy, please contact us at support@vbizcard.my.

When you register or use the Service, we collect the following information:

• Account information: username, email address, and password (stored as a secure hash).
• Profile & contact content: name, job title, phone numbers, social links, and any other information you voluntarily add to your vCard.
• Usage data: login timestamps and basic activity logs used to administer your account.
• Uploaded files: profile photos, cover images, PDFs, or other media you upload to your vCard.

We do not collect payment card details directly — any subscription payments are handled through third-party payment processors under their own privacy policies.

Specifically, we use your data to:

• Create and maintain your user account.
• Authenticate you when you sign in.
• Contact you regarding account status (approval, suspension, subscription enquiries).
• Respond to support requests you initiate.
• Send important service notices (e.g. policy changes, security alerts).
• Comply with our legal and regulatory obligations.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

For users in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract performance — processing necessary to provide the Service you signed up for (Article 6(1)(b) GDPR).
• Legitimate interests — security monitoring, fraud prevention, and service improvement (Article 6(1)(f) GDPR).
• Legal obligation — where we are required to retain or disclose data by law (Article 6(1)(c) GDPR).
• Consent — where you have explicitly opted in to optional communications (Article 6(1)(a) GDPR). You may withdraw consent at any time.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. We may share limited data only in the following circumstances:

• Service providers: Trusted infrastructure providers (hosting, email delivery) who process data strictly on our behalf and under data processing agreements.
• Legal requirements: Where we are compelled to disclose data by law, court order, or competent authority.
• Business transfer: In the event of a merger or acquisition, your data may be transferred to the successor entity, who will be bound by this policy.

Your publicly published vCard content (name, contact links, etc.) is visible to anyone with the link — this is the core function of the Service and is entirely within your control. You may update or remove this content at any time.

We retain your account data for as long as your account remains active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain certain records for legal or accounting purposes.

Uploaded files (photos, PDFs) are deleted alongside your account upon deletion. Anonymised or aggregated usage statistics that cannot identify you may be retained indefinitely.

Under GDPR (and equivalent legislation), you have the following rights regarding your personal data. To exercise any of them, contact us at support@vbizcard.my.

You also have the right to lodge a complaint with your local data protection authority (e.g. the ICO in the UK, or your national supervisory authority within the EEA).

We use a session cookie solely to keep you signed in during your browsing session. This cookie is essential for the Service to function and does not track you across other websites.

The free (Individual) plan displays adverts served by Google AdSense, which may set its own cookies subject to Google’s Privacy Policy. Business plan accounts are not shown ads.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Passwords are stored as cryptographic hashes and are never stored in plain text.

No method of transmission over the internet is 100% secure. If you believe your account has been compromised, please contact us immediately at support@vbizcard.my.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For significant changes, we will notify registered users by email or via an in-app notice.

Your continued use of the Service after any changes constitutes your acceptance of the revised policy.